feat(权限): 实现基于角色的路由权限控制

- 新增路由元信息类型定义 (requiresAuth, roles, title)
- 实现路由守卫中的角色权限校验逻辑
- 新增 403 禁止访问页面
- 提取权限校验函数 checkRoutePermission，提高可测试性
- 修复 JSON.parse 异常处理，增强健壮性
- 优化页面标题动态设置

测试优化：
- 重构 global-setup.ts，支持 JAR 文件启动后端服务
- 优化测试用例等待逻辑，减少硬编码延迟
- 简化 playwright 配置，移除多浏览器支持
- 新增路由权限守卫单元测试

关联需求：权限系统完善

novalon-manage-web/src/views/system/Dashboard.vue

@@ -93,7 +93,7 @@
               v-for="item in recentLogins"
               :key="item.id"
               :type="item.status === '0' ? 'success' : 'danger'"
-              :timestamp="item.loginTime"
+              :timestamp="formatDateTime(item.loginTime)"
               placement="top"
             >
               <div class="login-item">
@@ -171,6 +171,7 @@
 import { ref, reactive, onMounted } from 'vue'
 import { User, UserFilled, ArrowRight, Document, Clock, Location, Setting, Star, Cpu, Monitor, Coin } from '@element-plus/icons-vue'
 import request from '@/utils/request'
+import { formatDateTime } from '@/utils/dateFormat'
 
 const loading = ref(false)
 const stats = reactive({

novalon-manage-web/src/views/system/Forbidden.vue

@@ -0,0 +1,45 @@
+<template>
+  <div class="forbidden-container">
+    <el-result
+      icon="warning"
+      title="403"
+      sub-title="抱歉，您没有权限访问此页面"
+    >
+      <template #extra>
+        <el-button
+          type="primary"
+          @click="goBack"
+        >
+          返回上一页
+        </el-button>
+        <el-button @click="goHome">
+          返回首页
+        </el-button>
+      </template>
+    </el-result>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { useRouter } from 'vue-router'
+
+const router = useRouter()
+
+const goBack = () => {
+  router.go(-1)
+}
+
+const goHome = () => {
+  router.push('/dashboard')
+}
+</script>
+
+<style scoped lang="css">
+.forbidden-container {
+  display: flex;
+  justify-content: center;
+  align-items: center;
+  min-height: 100vh;
+  background: #f5f7fa;
+}
+</style>

novalon-manage-web/src/views/system/Login.vue

@@ -105,8 +105,8 @@ const onFinish = async () => {
     
     try {
       await permissionStore.fetchUserMenus()
-    } catch (fetchError) {
-      console.warn('获取用户菜单失败:', fetchError)
+    } catch (menuError) {
+      console.error('获取用户菜单失败:', menuError)
     }
     
     ElMessage.success('登录成功')